Описание
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | 1.1.6-1ubuntu1 |
| hardy | ignored | end of life |
| karmic | ignored | end of life |
| lucid | released | 1.0.6-1ubuntu1.2 |
| maverick | released | 1.1.4-1ubuntu1.2 |
| natty | not-affected | 1.1.6-1ubuntu1 |
| upstream | released | 1.1.6 |
Показывать по
Ссылки на источники
9.3 Critical
CVSS2
Связанные уязвимости
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
Multiple integer overflows in real.c in the Real demuxer plugin in Vid ...
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
Уязвимость плагина Real demuxer (real.c) программы-медиапроигрывателя VideoLAN VLC, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
9.3 Critical
CVSS2